REALISATION, HOSTING, SERVICE & SUPPORT

Liability
CHG-MERIDIAN AG can at its own discretion and without assumption of liability, change or end this online offering wholly or in part at any time and without notice. By posting a link to third party online offering ("Hyperlinks"), the CHG-MERIDIAN AG does not accept ownership of either the online offering or its contents.

Battery regulation:
Note about the return of batteries according to §12 BatterieVO:

CHG-MERIDIAN AG is obliged in accordance with the battery regulation, to inform the user of the following in connection with the sale of batteries or rechargeable batteries, or with the supply of devices which contain batteries or rechargeable batteries:

Batterie must not be disposed of in household waste. The user, as end-user, is legally obliged to return empty batteries. The user can return batteries after use to the point of sale or its immediate vicinity (e.g. in municipal collection points or shops) free of charge. The user also has the choice of returning the batteries by post. The user can approach his installation company for returns.

Batteries or rechargeable batteries which contain pollutants are marked with a symbol of a crossed-out dustbin. The chemical name of the pollutant can be found close to the dustbin symbol.
Explanation: Cd stands for Cadmium, Pb for lead and Hg for mercury.

Note: General Act on Equal Treatment (GAET)
For the sake of easier reading, no gender-specific distinction is made in this document. The terms used apply, in the context of equal treatment, to both genders.

Data protection declaration

Data protection
We, CHG-MERIDIAN AG, are responsible for this online offering and, as the provider of a teleservice, must inform you at the beginning of your visit to our online offering, about the type, scope and purpose of the collection and use of personal data in a precise, transparent, understandable and easily accessible way in clear and simple language. The contents of the information must be retrievable for you at all times. We are therefore obliged to inform you about which personal data will be collected or used. Any information relating to an identified or identifiable natural person is described as personal data.

We place great value on the security of your data and compliance with the data protection regulations. The collection, processing and use of personal data is subject to the regulations of the European and national laws currently in force

We would like to show you in the following data protection declaration how we handle your personal data and how you can make contact with us:

‘User’ includes all categories of persons affected by the data processing. These include, for example, our business partners, customers, interested parties and other visitors to our online offering.

B. Specific

Data protection declaration
We guarantee that we only collect, process, store and use your incoming data in connection with the processing of your request, as well as for internal purposes and providing the services that you have requested or to make content available.

Basis of data processing
We process the user’s personal data only in compliance with the relevant data protection regulations. The user’s data are only processed when the following statutory permission exists:

in order to deliver our contractual performance (e.g. Processing orders) and online services

processing is required by law

your consent is given

on the basis of our legitimate interests (i.e. interest in the analysis, optimization, and economic operation and security of our online offering in the sense of Art. 6 para. 1 lit. f. GDPR, in particular range measurement, production of profiles for advertising and marketing purposes, as well as the collection of access data and the use of services from third party providers)

We would like to show you where the main legal grounds are regulated in the GDPR:

Data transfer to third partiesData is only passed to third parties within the framework of the legal provisions. We only pass user’s data to third parties when this is, for example, necessary for contractual purposes or based on our legitimate interest in the economic and the effective operation of our business.

In the event that we use subcontractors to provide our services, we make suitable legal arrangements as well as appropriate technical and organizational measures, to provide protection for personal data in accordance with the relevant legal provisions.

Data transfers to third countries or an international organization
Third countries are countries in which the GDPR is not a directly applicable law. This basically includes all countries outside the EU, respectively, the European Economic Area.

A transfer of data to a third country or an international organization takes place. Hereby the EU commission’s decision on adequacy is taken into account. This says that a secure third country or a secure international organization in concerned, which offers an adequate level of protection.

Length of storage of your personal data
We adhere to the principles of data economy and data avoidance. This means the data made available to us is only retained as long as it is needed to fulfil the previously named purposes or as laid down by the manifold storage periods provided for by the legislator. If the relevant purpose no longer exists, respectively after expiry of the appropriate period, your data is routinely blocked, respectively erased, in accordance with the statutory provisions

We have developed a company-internal concept to guarantee this procedure.

Making contact
If you make contact with us by email or through the contact form, you consent to electronic communication. Personal data will be collected in the context of contacting us. Which data is collected in the case of a contact form, can be seen on the respective contact form. Your data are transmitted with SSL encryption. The statements which you make will be stored exclusively for the purpose of processing your inquiry and for possible follow-up questions.

We would like to advise you that emails can be read or changed, unnoticed and without authorization, during transmission. We would also like to bring to your attention that we use software to filter unwanted emails (spam filter). Emails can be rejected by the spam filter if they are wrongly identified as spam due to the presence of certain characteristics.

What rights do you have?

Right to information
You have the right to obtain information about your stored data without charge. Upon request, we will tell you in writing, in accordance with current law, what personal data about you we have stored. This also includes the origin and recipient of your data as well as the purpose of the data processing.

Right to rectification
You have the right to have your data which is stored by us, corrected, if it is incorrect. You can demand a limitation to the processing of your personal data, e.g. if the accuracy of your personal data is contested.

Right to blocking
Furthermore, you can have your data blocked. So that a blocking of your data can be taken into account at any time, the data must be held in a lock file for control purposes.

Right to erasure
You can also demand the erasure of your personal data, so long as no legal storage obligation exists. If such an obligation exists, we will block your data on request. If appropriate statutory requirements are present, we will also erase your personal data without a request from yourself.

Right to data transferability
You are entitled to demand that the personal data transferred to us is made available in a format which enables it to be transferred to another location.

Right to complain to a supervisory authority
You have the option of approaching a data protection supervisory authority with a complaint.

Right to object
You have the option to object at any time to the use of your data for internal purposes with future effect. For this, it is sufficient to send an appropriate email to dataprotection@meridian.de. However such an objection does not affect the legality of processing procedures which we have already carried out. This does not affect data processing in respect of other legal bases, for example, such as contract initiation (see above).

Protection of your personal data
We take state of the art contractual, organizational and technical security measures to ensure compliance with the provisions of the data protection laws and therefore, to protect the data which we process against accidental or deliberate manipulation, loss, destruction or access by unauthorized persons.

In particular, our security measures include the encrypted transfer of data between your browser and our server. 256-bit-SSL (AES 256) encryption technology is used for this. This includes our IP address.

Thereby your personal data is protected in the context of the following points (extract):

Ensuring the confidentiality of your personal data
To ensure the confidentiality of the personal data which we store, we have taken various measures to control access.

Ensure the integrity of your personal data
To ensure the integrity of the personal data which we store, we have taken various measures to control transfer and input.

Ensure availability of your personal data
To ensure the availability of the personal data which we store, we have taken various measures to control orders and availability.

The security measures employed are continually improved in accordance with technical development. Despite these precautions, because of the insecure nature of the internet, we are unable to guarantee the security of your data transfers to our online offering. For this reason, all data transfers from you to our online offering are made at your own risk.

Protection of minors
Persons who are under 16, are not allowed to provide us with their personal information without the express consent of the person having parental responsibility, unless they have reached the age of 16 or are older. These data will be processed in accordance with our data protection declaration.

Cookies
We use cookies. Cookies are small text files which are stored locally in the internet browser’s cache. Cookies enable the internet browser to be recognized. The files are used to help the browser navigate through the internet offering and use all functions to their full extent.
Our internet offering uses: Browser cookies

Control of cookies by the user
Browser cookies: All browsers can be set so that cookies are only accepted upon request. Also, per set-up, cookies can only be accepted for sites which are currently being visited. All browsers offer functions which make the selective deletion of cookies possible. The acceptance of cookies can also be deactivated generally, however in that case, limitations in the online offering’s user friendliness must be accepted.

Lifespan of the cookies employed
Cookies are managed by our internet offer’s website. The internet offering uses
Transient cookies/Session cookies (single use)
Life spam: Until the online offer is closed

Deactivate or remove cookies (Opt-Out)
Every browser offers the option of limiting or deleting cookies. Further information about this can be obtained from the following websites:

Use of etracker
We use the services of etracker GmbH from Hamburg, Germany (www.etracker.com) on this website, to analyze usage data. For this, cookies are used to make a statistical analysis of the visitors’ use of this website possible and to display use-related content and advertising. Cookies are small text files which are stored on the user’s end device by the internet browser. etracker cookies do not contain any information which would allow a user to be identified.

The data produced by etracker is processed and stored exclusively by etracker in Germany, by order of the provider of this website, and is subject to the strict German and European data protection legislation and standards. In this context, etracker has been independently tested, certified and awarded the data protection ePrivacyseal seal of quality.

The data processing is carried out on the basis of ‘legitimate interest’ according to the EU General Data Protection Regulation. Our legitimate interest is the optimization of our online offering and our web presence.

Because our visitors’ privacy is very important to us, the IP addresses will be anonymized by etracker as soon as possible and the registration- or device identification transformed by etracker into a key which is unique but not assigned to a person. etracker does use data in other ways, combine it with other data or transmit it to third parties.

You can object to the data processing described above at any time, to the extent that it takes place with personal data. Your objection has no negative consequences for you.

Further information on data protection with etracker can be found here.

Use of METIS web beacons
We use web beacon technology from VG Wort (METIS System). Web beacons are considered harmless in data protection legislation. The METIS web beacons are used to track the number of visitor numbers to various subpages of our website.

Use of Google Maps
We use Google Maps for the presentation of maps and the creation of route maps. Google Maps is operated by Google Inc., 1600 Amphitheatre Parkway, Mountain View, CA 94043, USA. By using this online offer, you consent to the collection, processing and use of the automatically collected data as well as the data which you input yourself (including the IP address) by Google, one of its representatives or a third-party provider. The conditions of use for Google Maps can be found under the following link:

Use of YouTube
Functions of the YouTube service are integrated into our website for displaying and playing videos. This function is offered by YouTube, LLC 901 Cherry Ave. San Bruno, CA 94066 USA. Further information can be found in YouTube’s data protection guidelines.

An extended data protection mode is used for this which, according to the provider, only begins to record user information when the video playback is started.

If the playback of an embedded YouTube video is begun, YouTube uses cookies to collect information about user behavior. According to notes from YouTube, this is used to collect video statistics, improve user friendliness and prevent misuse, among other things. Independently from the playback of the embedded videos, a connection is created with the Google network “DoubleClick” each time our online offering is called up, which can lead to further data processing procedures without our influence.

Use of Vimeo Plugins
We use plugins from Vimeo.com. The operator is Vimeo LCC, 555 West 18th Street, New York, New York 10011, USA (“Vimeo”).

When you call up such a plugin, a connection is made to the Vimeo servers and the plugin is displayed on the internet page through a message to your browser. This tells the Vimeo server which internet pages you have visited. If you are logged in as a Vimeo member, Vimeo relates this information to the platform’s respective user account. By using these plugins, for example by clicking the start button for a video or sending a comment, the information is related to the e.g. Vimeo user account, which you can only prevent by logging out before using the plugin.

Information about the collection and use of data by the above-named platform, respectively plugins, can be found in the data protection note: http://vimeo.com/privacy

Use of the Xing-Share-Button
We use the “XING Share-Button”. By calling up our online offering, a short-term connection to the XING AG (“XING”) servers is made over your browser, with which the “XING Share-Button” functions (especially calculation/display of meter readings) are produced. XING does not store any personal data about you from calling up this offering. In particular, XING does not store IP addresses. In addition, no evaluation of user behavior is made through cookies in connection with the “XING Share-Button” .

Use of LinkedIn Plugins
We use social plugins from the social network LinkedIn. LinkedIn is operated by LinkedIn Corporation, 2029 Stierlin Court, Mountain View, CA 94043, USA (“LinkedIn”). The LinkedIn plugins can be recognized by the LinkedIn logo or the “Share-Button” (“recommend”) on our online offering.

When you visit our online offering, the plugin makes a direct connection between your browser and the LinkedIn server. LinkedIn receives the information that you have visited our online offer with your IP address. If you click the LinkedIn “Share-Button” while you are logged into your LinkedIn account, you can link the contents of our online offering to your LinkedIn profile. Thereby, LinkedIn can associate your visit to this online offer with your user account.

The purpose and scope of the data collection and its further processing and use by Pinterest, as well as your rights in this connection and settings options for the protection of privacy, can be found in LinkedIn’s data protection notes: https://www.linkedin.com/legal/privacy-policy?_l=de_DE

Amendments to our data protection policy
We reserve the right to adapt our data protection declaration occasionally, so that it always meets the current legal requirements or to implement changes in our services in the data protection declaration. This could apply e.g. to the introduction of new services. The new data protection declaration would then apply to your return visit.

Brand protection
Each firm or trade mark named here is the property of the respective firm. The naming of brands and names is purely for informative purposes.

C. Specific provisions for Russia

The following applies to users who are residents of the Russian Federation:

The services of our online offer listed above, are not intended for citizens of the Russian Federation who are resident in Russia.

If you are a Russian citizen resident in Russia, you are expressly informed that all personal data that you make available to us over our internet offering, is exclusively at your own risk and on your own responsibility. You further agree that you will not hold us responsible for a possible breach of Russian Federation law.

Business Data protection declaration

1 Introduction and scope

The CHG-MERIDIAN AG (CHG) is committed to process personal data responsibly and in compliance with the applicable data protection laws in all countries in which the company operates.

This European Union (“EU”) Customer/Vendor Data Protection Notice (the “Notice”) describes the types of personal data CHG collects, how CHG uses that personal data, with whom the CHG shares your personal data, and the rights you, as a data subject, have regarding the CHG`s use of the personal data. This notice also describes the measures CHG takes to protect the security of the data and how you can contact us about our data protection practices.

2 Contact details of the Data Controllers

The CHG-entities responsible for the collection and use of your personal data (the Data Controllers) in your home country for the purposes described in this notice are:

CHG-MERIDIAN AG

CHG-MERIDIAN Industrial Solutions GmbH

CHG-MERIDIAN Nederland BV

CHG-MERIDIAN Belgium NV

CHG-MERIDIAN Belux NV

CHG-MERIDIAN UK Limited

CHG-MERIDIAN Computer Leasing UK Limited

CHG-MERIDIAN Ireland Limited

CHG-MERIDIAN France SAS

CHG-MERIDIAN Spain S.L.

CHG-MERIDIAN Italia S.p.A.

CHG-MERIDIAN Austria GmbH

CHG-MERIDIAN Schweiz AG

CHG-MERIDIAN tehnološki menedžment d.o.o.

CHG-MERIDIAN Norway AS

CHG-MERIDIAN Skien AS

CHG-MERIDIAN Sweden AB

CHG-MERIDIAN Denmark A/S

CHG-MERIDIAN Finland OY

CHG-MERIDIAN Polska sp. z.o.o.

CHG-MERIDIAN Czech Republic s.r.o.

CHG-MERIDIAN Slovakia s.r.o.

CHG-MERIDIAN USA Corp

CHG-MERIDIAN Canada Ltd.

CHG-MERIDIAN S.A.P.I. de C.V.

CHG-MERIDIAN do Brasil Arrendamento Mercantil S.A.

CHG-MERIDIAN do Brasil Locação de Equipamentos Ltda.

3 Contact details of the Data Protection Manager

A Data Protection Officer (“DPO”) is designated. The DPO is involved in all issues related to the protection of your personal data. In particular, the DPO is in charge of monitoring and ensuring compliance with this notice and the applicable data protection laws. They will also provide advice on data protection matters upon request.

For any clarification or additional information you may need in order to fully understand this Notice, please contact:

4 Purposes of data processing and legal basis

CHG processes personal data in accordance with applicable data protection laws and regulations and only for limited, explicit and legitimate purposes. CHG will not use personal data for any purpose that is incompatible with the original purpose for which it was collected unless you provide your prior explicit consent for further use.

Personal data relating to customers/vendors may be processed for the purposes of:

Managing commercial relationships with current and potential clients;

Managing commercial relationships with current and potential suppliers and vendors;

Carrying out promotional operations;

Conducting statistical surveys and marketing studies, etc.

CHG ensures that our internal governance procedures clearly specify the reasons behind decisions to use personal data for alternative processing purposes. Prior to using your personal data for a purpose other than the one for which it was initially collected, you will be informed about such new purpose.

5 Categories of personal data processed

The provision of personal data is a requirement necessary to enter into a contract with CHG or a requirement by law or regulation for the CHG to administer your customer/vendor relationship. The personal data processed is limited to the data necessary for carrying out the purpose for which such personal data is collected.

Personal data processed includes the following:

Business information (such as name of organization, department and job title);

CHG will not collect personal data if such collection is prohibited under the applicable data protection laws.

In no case will personal data revealing religious beliefs, racial or ethnic origin, political opinions, philosophical beliefs, trade union membership or concerning sex life be processed in the customer/vendor context.

CHG will maintain personal data in a manner that ensures it is accurate, complete and up-to-date.

6 Data Security

CHG has implemented appropriate technical and organizational measures to ensure a level of security appropriate to the risk, such risk analysis includes an analysis of the risk of compromising the rights of the data subject, costs of implementation, and the nature, scope, context and purposes for data processing.

The measures include

(i) encryption of personal data where applicable/appropriate;

(ii) the ability to ensure the ongoing confidentiality, integrity, availability and resilience of Processing systems and services;

(iii) the ability to restore the availability and access to personal data in a timely manner in the event of a physical or technical incident; and

(iv) a process for regularly testing, assessing and evaluating the effectiveness of technical and organizational measures for ensuring the security of the processing.

7 Recipients of personal data

CHG will only grant access to personal data on a need-to-know basis, and such access will be limited to the personal data that is necessary to perform the function for which such access is granted.

Authorization to access personal data will always be linked to the function so that no authorization will be extended to access personal data on a personal basis. Service providers will only receive personal data according to the purposes of the service agreement with the Company.

8 International data transfers

International data transfers refer to transfers of personal data outside of the European Economic Area (“EEA”). The international footprint of CHG involves the transfer of personal data to and from other group companies or third parties, which may be located outside the EEA. CHG will ensure that when personal data is transferred to countries that have different standards of data protection, appropriate safeguards to adequately protect the personal data are implemented to secure such data transfers in compliance with applicable data protection laws. CHG has implemented Data Transfer agreements based on EU model clauses to cover international data transfers and a copy of these agreements can be obtained by contacting the DPO.

9 Retention of personal data

CHG will not retain your Personal data for longer than is allowed under the applicable data protection laws and regulations or for longer that is justified for the purposes for which it was originally collected or otherwise processed, subject to applicable local retention requirements.

10 Data Protection rights

Under applicable data protection laws, you will benefit from the following rights:

Right to access to, rectification and erasure of personal information;

Right to restriction of processing and to object to processing;

Right of data portability to the extent applicable;

Right to withdraw consent where the processing is based on consent; and

Right to lodge a complaint with the supervisory authority.

11 Miscellaneous

This notice may be revised and amended from time to time and appropriate notice about any amendments will be given.

CHG is allowed to adapt the text of this notice only in order to be compliant with local legislation by means of an addendum attached to this notice. In case of any discrepancies between this notice and a specific local addendum made in accordance with local law, the terms of the latter will prevail.